Displays
Displays is a standard configuration interface for adding, editing, and removing the different Event Displays. Event Displays control what columns are shown in the Event List, which fields can be utilized in the Standard view of the Forensic search interface, as well as the default sort order. The columns displayed and sort order are all editable.
Refer to the Standard Configuration Interface guide for details on interacting with the grid and form.
This user interface calls REST methods from api/event/displays.
The UI path for this interface is Configuration -> Events -> Displays.
Form Fields
-
Name - The name of the display.
-
User Owner - Defines the user that owns the display.
-
Group Owner - Defines the group that owns the display.
-
Disable Conversions - If checked, when viewing Event list, the original value will be shown instead of applying display conversions.
-
Columns - This section lists all of the fields available within the Events database.
Note:
-
Individual fields can be drag-and-dropped to set the order of fields when the event list is displayed.
-
Individual fields can be drag-and-dropped to the Sorting order toolbar, which will then be used as the default sort order when the event list is displayed. Additional information can be found on the Event List Sorting Using Displays guide.
-
Visible - A checkbox to indicate the field will be visible when the event list is displayed.
-
Field - The field name in the Events table. These cannot be changed from this UI.
-
Custom Name - A custom name can be specified for the Field. The custom name will be shown instead of the real name when the event list is displayed.
-
Width - The column width when the event list is displayed. An integer may be specified to fix the column width, or flex:(number) may be used to fill-in the remaining width.
Note:
The number after the colon should be 1 or greater. If multiple fields are marked as flex, fields that are marked with a higher value will get more of the available space than fields with a lower value.
-
Align - If the column content is aligned left, center, or right.
-
Type - If the content is rendered as a number, string, date/time, or GeoJSON value.
-
-
Viewers - Additional User Groups that will be able to use the display.
Best Practices
The default sort that is applied to the event list is set in the Sorting order area within the Columns section. Additional information can be found on the Event List Sorting Using Displays guide.